Skip to content
fr Sign in
6.5 Medium

CVE-2023-36634 An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line…

Description

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments.

Affected products and versions

Product Affected versions Fixed in
FortiAP-U 7.0.0 No fix stated
FortiAP-U 6.2 6.2.0 → 6.2.5 No fix stated
FortiAP-U 6.0 6.0.0 → 6.0.4 No fix stated
FortiAP-U 5.4 5.4.0 → 5.4.6 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiAP-U

The 3 CVEs of FortiAP-U →
CVE-2025-53680 An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78]… 6.1 Medium CVE-2023-25608 An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line… 5.2 Medium
Track this CVE